Strangers Keep Calling You Back Even Though You Never Called Them? Your Number May Have Been Spoofed
Your call history shows no outgoing calls, yet several people insist you contacted them. This is known as phone number spoofing, and it has increased sharply in France.
A stranger calls you.
They say:
"Hello, did you try to call me?"
You say no.
Ten minutes later, someone else calls.
Then a third person.
You check your call history.
Nothing.
Naturally, you start wondering:
"Has someone hacked my phone?"
Not necessarily.
Someone may simply have spoofed your phone number.
And the problem has grown significantly.
According to Cybermalveillance.gouv.fr, requests for assistance related to phone number spoofing increased by 517% in 2025. Meanwhile, Arcep recorded more than 19,000 reports of phone number spoofing in 2025, compared with just 531 in 2023.
Source: Cybermalveillance.gouv.fr
How Can Someone Make Calls Using My Number?
They do not necessarily have your phone.
They may not have cloned your SIM card.
They might not even know your name.
The problem lies in the information used to display the caller's phone number.
Arcep explains that some professional telephone systems technically allow the caller ID to be configured. This flexibility, originally designed for legitimate business purposes, has been exploited by fraudsters.
Your number can therefore be selected almost at random and displayed on someone else's phone.
They see:
06 XX XX XX XX
They call back.
And you answer.
Even though you never made the original call.
Does This Mean My Phone Has Been Compromised?
This is one of the more reassuring aspects of the situation.
Not necessarily.
Arcep explains that phone number spoofing is often temporary and does not necessarily mean your personal data has been stolen.
A fraudster may have selected your number randomly before quickly moving on to another one.
So if strangers start calling you back, do not immediately reset your phone.
Do not delete all your accounts.
Do not throw away your SIM card.
First, try to understand what is actually happening.
Should You Replace Your SIM Card?
No.
This is important because replacing the SIM card is often people's first reaction.
Arcep explicitly states that changing your SIM card is completely ineffective against this type of spoofing.
Changing your phone number is also generally unnecessary, unless the problem continues over a prolonged period.
Why?
Because the fraudster is not actually using your SIM card.
They are using your number as the caller ID displayed to their victims.
Replacing the card therefore changes nothing.
Why Phone Number Spoofing Is Still Dangerous
For you, the situation is mostly frustrating.
For the person receiving the fraudulent call, it can be much more dangerous.
Imagine a scammer displaying the number of a bank.
Or a police station.
Or a government department.
Or even someone you know.
The phone displays something familiar.
The victim lowers their guard.
Arcep has documented cases where scammers display numbers belonging to public authorities or financial institutions to make their calls seem legitimate.
This is one reason why seeing a familiar phone number should no longer be considered reliable proof of the caller's identity.
What Changed in January 2026?
France has strengthened its safeguards.
Since 1 January 2026, when a call originating from abroad presents a French mobile number that cannot be authenticated, operators must hide the displayed number.
The number authentication mechanism relies on a chain of trust between operators and a digital signature used to verify that the presented number is legitimate.
This reduces certain opportunities for fraud.
But it does not mean phone number spoofing has disappeared.
In January 2026, Arcep opened an administrative investigation to examine why these practices were continuing and which routes fraudulent calls were taking.
What Should You Do If Your Number Is Being Spoofed?
First, do not panic.
If someone calls you back, simply explain:
"My number appears to have been spoofed. I did not make that call."
Do not try to call back everyone involved.
Do not attempt to investigate the scammer yourself.
Simply note the period during which the unexpected callbacks occur.
Then report the problem through J'alerte l'Arcep.
This is the reporting process recommended by Arcep for people affected by phone number spoofing.
If the calls stop quickly, there is generally no need to go further.
If they continue for a long time or are accompanied by other unusual activity on your line, contact your telecom operator as well.
What If the Displayed Number Belongs to My Bank?
This is the other side of the problem.
When you receive a sensitive call, you cannot always know whether the displayed number is authentic.
So when a bank, government department or another organisation contacts you about something important, do not rely on caller ID to verify who is calling.
Verify their identity by making contact yourself.
End the call.
Then dial the official number.
This rule applies even if your phone displays the organisation's exact name.
Is a Withheld Number Always Fraudulent?
No.
Under the new rules introduced in 2026, a number may be hidden because the caller deliberately withheld it.
But it may also be hidden because technical authentication was not possible, particularly in certain international roaming situations.
Arcep therefore explains that a withheld number is not, by itself, proof of fraud.
Once again, the important point is this:
Your trust should not depend on what appears on the screen.
It should depend on the nature of the request.
Conclusion
A scammer can use your phone number without ever hacking your phone.
It seems counterintuitive.
But understanding that distinction can save you a great deal of unnecessary stress.
If strangers start calling you back:
- Do not immediately replace your SIM card.
- Do not change your phone number in a panic.
- Report the spoofing to Arcep.
- Monitor whether the problem continues.
Above all, remember the broader lesson:
What appears on your phone screen is no longer enough to prove who is calling.
For any sensitive request, hang up and make the call yourself.
